Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Session handling with two rules

Tom | Last updated: Oct 22, 2015 09:39PM UTC

Hi, I have a web-app that have two issues when scanning or spidering. Sometimes app closes the session so I got a 302 redirect, other times, app malfunctions and all request ends with error 500 and I must re-auth. I have a valid macro to perform an authentication but I can't configure Burp to handle two session rules. First I try to do two separate rules with two separate action rules but only one is checked, both rules are 'check session is valid'. Second, I try to do two rule actions in the same rule, to search for 302 http header and 500, but no luck. My last attempt was to do a regex like /302|500/g but regexp doesn't work, I can't find information about regexp in Burp so don't know how to do it

PortSwigger Agent | Last updated: Oct 27, 2015 01:12PM UTC